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SPECIFICATION 
QUANTUM CIPHER COMMUNICATION SYSTEM 

5 Technical Fie l d 

This invention relates to a quantum cipher 
communication system that can be used in distributing privacy 
(secret) keys in order to ensure security of communication. In 
particular, it relates to a quantum cipher communication system 
10 designed to measure or observe the quantum mechanical state of 
a signal being transmitted and to detect such a signal at a 
substantially high quantum efficiency. 



€1 Background Art 

p= s 15 The conventional cipher technologies which are designed 

f^f to ensure security of communication include a privacy key cipher 

system that makes use of a common privacy key which is known 
only to proper parties of communication, and a public key cipher 
system that has recourse to a pair of keys, given by a privacy and 
20 a public key. 

Cryptology of the public key cipher system relies for its 
secrecy retainability on the fact that for example, factoring an 
extremely large integer is hard to compute. However, progresses 
in performance of computers, and advancements in distributed 
25 processing techniques using networks have made security by 
that system no longer perfect. 

In contrast, if a privacy key known only to legitimate 
parties of communication can be held in common by the sender 
and recipient, an absolutely secure communication may be 
30 realized. In such recognition in the art, a technique called 
quantum cipher communication has in the recent decade been 
proposed that seeks secrecy retainability for a privacy key to be 
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distributed in a quantum-mechanical principle (J. Cryptology, 5, 
3-28 (1992), C. H. Bennett et al). 

If the principle of quantum mechanics is applied that an 
action to observe or measure necessarily gives a disturbance to 
5 an object observed or measured, any attempt by a wiretapper to 
wiretap gives a change in a signal being transmitted. 

It therefore follows that monitoring a signal to find a 
change in it can divulge the presence of a wiretapper. In specific 
terms, using a quantum cipher allows a privacy key with high 

10 secrecy retain ability to be prepared and held in common by and 
between parties at two sites spaced distant. For effecting a 
quantum ciphering operation or encryption it is conventional to 
use a light as the carrier of a transmission signal. And it has 
been the common practice to detect a signal light by the photon 

15 counting method, a light detecting technique, that uses a 
detector which in response to one or more photons incident upon 
generates electric pulses at a certain given probability called 
quantum efficiency. 

However, the quantum cipher communication systems so 

20 far proposed that rely on the photon counting method have failed 
to be practical because of the problems unresolved, both on its 
principle and technologically, which accrue from the method. 

First, the problem on the principle is that the inability to 
check up on the quantum mechanical state of a signal light once 

25 it has been transmitted prevents detecting a wiretap if the 
wiretapper has taken a sophisticated measure such as a quantum 
nondestructive measurement. Stated otherwise, since a 
wiretapper is able to read information on the number of photons 
in a signal light without giving a change in that number of the 

30 photons (the effect of a measurement does appear as a change in 
phase), it follows that counting only the number of photons after 
transmission allows wiretapping to remain unnoticed. 
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Further, there exists the technological problem that a 
detector is unavailable having a high quantum efficiency enough 
to meet with lights of 1.3 //m or 1.5/1 m in wave length for 
common use now in light communication systems. Not only does 
5 a loss in detection reduce the transfer rate for data, but on the 
principle it does not give a distinction from an attempt to 
wiretap. 

It is accordingly an object of the present invention to 
provide a quantum cipher communication system that permits 
10 measuring a signal being transmitted in its quantum mechanical 
state. It is also an object of the present invention to provide a 
quantum cipher communication system that permits detecting 
the signal being transmitted at a substantially high quantum 
efficiency. 

15 

Disclosure of the Invention 

In order to achieve the objects mentioned above, the 
present invention provides, a quantum cipher communication 
system in quantum cipher communication using a light signal, 

20 which system is characterized by the step of detecting 
wiretapping based on a change in a quantum-mechanical 
probability distribution defined by an amplitude and a phase of a 
difference signal derived from a signal light which change is 
produced by a wiretapping operation. 

25 The system so constructed as above permits monitoring a 

signal being transmitted in its quantum mechanical state and 
thereby allows detecting a wiretap using a sophisticated measure 
such as a quantum nondestructive measurement, which has 
hitherto been hard to detect. 

30 The present invention also provides a quantum cipher 

communication system in quantum cipher communication using 
a light signal, which system is characterized by the steps of- 
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splitting a light signal from a transmission source side into an 
intense reference signal and a weak transmission signal which is 
so weak that a change in its quantum mechanical state is 
detectable; imparting a phase difference between the said 
5 reference signal and the said transmission signal while they are 
in a process of transmission; superimposing in a transmission 
receiving side the said reference signal and the said transmission 
signal to form two output lights which are opposite in phase and 
producing a difference signal which is represented by a 
Cf 10 difference between the said two output lights; deriving a 

Sj frequency distribution of the said difference signal as a function 

03 

^ of a fluctuation of the quantum state of the said transmission 

Cj signal; based upon or in accordance with the frequency 

i y , . 

u3. distribution of the said difference signal, making privacy (secret) 

IU 15 keys respectively at the said transmission source and receiving 

tftl sides for holding in common thereby; and directly observing the 

Lij fluctuation of the quantum state of the said transmission signal. 

?"f The system so constructed as described above permits 

detecting a transmission signal at an efficiency as high as its 

20 theoretical upper limit., by virtue of using a reference signal 

which is intense. 

The present invention also provides a quantum cipher 

communication system which includes: a first beam splitter for 

splitting a light from a light source into a transmission signal 

25 and a reference signal; a phase modulating means for imparting 

a phase modulation to the said transmission signal; a light 

attenuator for converting the said transmission signal into a 

weak transmission signal which is so weak that a change in its 

quantum state is detectable; and a phase modulating means for 

30 imparting a phase modulation to the said reference signal, and 

which system also includes, operative after a relative phase 

difference is imparted between the said transmission and 
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reference signals- a second beam splitter for superimposing the 
said phase-modulated weak transmission signal and the said 
phase modulated intense reference signal to form two output 
lights; a first and a second photoelectric conversion elements for 
5 converting the said two output lights from the said second beam 
splitter into two corresponding electric signals which are 
opposite in phase; and an amplifier for amplifying a difference 
signal representative of a difference between the said two output 
lights to output an amplified corresponding voltage. 
q 10 The system so constructed as described above permits 

r] splitting a light signal from a transmission source side into an 

m intense reference signal and a weak transmission signal which is 

□ so weak that a change in its quantum mechanical state is 

\fi detectable; imparting a phase difference between the reference 

^ 15 signal and the transmission signal while they are in a process of 

hj transmission; superimposing in a transmission receiving side the 

i ] reference signal and the transmission signal to form two output 

Q lights which are opposite in phase and producing a difference 

signal which is represented by a difference between the two 
20 output lights; deriving a frequency distribution of the difference 
signal as a function of a fluctuation of the quantum state of the 
transmission signal; based upon or in accordance with the 
frequency distribution of the difference signal, making privacy 
(secret) keys respectively at the transmission source and 
25 receiving sides for holding in common thereby; and observing the 
fluctuation of the quantum state of the transmission signal. 
Therefore, detection at a high efficiency and measurement of a 
signal light in its quantum state are realized. 

In a quantum cipher communication system according to 
30 the present invention, the said phase modulating means 
preferably includes a mirror movable by a distance as small as 
the wave length of an incident light. The system so constructed, 
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allows a phase modulation or change to be made with ease. 

In a quantum cipher communication system according to 
the present invention, the said reference signal and the said 
transmission signal are split both in time and as polarized and 
5 then transmitted to travel along a common path. The system so 
constructed and with the common path constituted by a single 
optical fiber provides a quantum cipher communication system 
between two sites spaced across a long distance. 

Further, the present invention provides a quantum 
„ 10 cipher communication system which includes- a first beam 

*0 splitter for splitting a light from a light source into a 

m transmission signal and a reference signal; a first light polarizer 

2; for polarizing the said transmission signal through one of two 

fU long distance paths; a light attenuator for converting the said 

~* 15 transmission signal into a weak transmission signal which is so 

!H weak that a change in its quantum state is detectable; a first 

M phase modulating means for imparting a predetermined phase 

P5 modulation to the said transmission signal; and a first polarized 

^ beam splitter for receiving the said intense reference signal 

20 having passed through one of two short distance paths and the 
said transmission signal and returning the received signal to 
travel along a common optical path, which system also includes, 
operative after a relative phase difference is imparted between 
the said transmission and reference signals and included in a 
25 transmission receiving side: a second polarized beam splitter for 
isolating from each other the said transmission and reference 
signals transmitted through a single optical fiber; a second phase 
modulating means for imparting a phase modulation to the said 
isolated transmission signal through the other of the said two 
30 short distance paths; and a second light polarizer for polarizing 
the said isolated reference signal through the other of the said 
two long distance paths, and which system further includes : a 
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second beam splitter for superimposing the said transmission 
and reference signals which are coincident with each other in 
time and polarization to produce two output lights; a first and a 
second photoelectric conversion elements for converting the said 
5 two output lights into corresponding electric signals; and an 
amplifier for amplifying a difference signal representative of a 
difference between the said two output lights to output an 
amplified corresponding voltage. 

The system so constructed as described above permits 

10 the transmission and reference signals to travel in different 
paths only in the sender and recipient sides and each of a short 
distance and for the most part along a common path of 
transmission. Thus, a variation of the relative difference in 
optical path between the two signal lights can be made small. 

15 In a quantum cipher communication system according to 

the present invention, there is preferably included a third light 
polarizer in an output side of the said optical fiber for making a 
correction for a disturbance of polarization of the said reference 
signal. 

20 The system so constructed as described above using the 

intense reference signal allows effective correction for 
disturbance in polarization of light or polarized light signals 
while in transmission through the optical fiber. 

Further, in a quantum cipher communication system 

25 according to the present invention, preferably threshold values 
are established, respectively, for positive and negative values of 
the said difference signal, and that the state of the said 
transmission signal is discriminated on the basis of the said 
threshold values. 

30 The system so constructed as described above and 

establishing threshold values permits practical detection 
efficiency and error rate as desired in accordance with the 
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intensity of a transmission signal. 

Also, in a quantum cipher communication system 
according to the present invention, preferably in addition to the 
phase modulations designed to transmit privacy keys, such a 
5 phase modulation is so imparted as described and having a value 
later determined for making a correction for a fluctuation of the 
difference in optical path between the said reference signal and 
the said transmission signal which develops by reason of an 
external cause. 

10 The system so constructed as described above and giving, 

besides phase modulations designed to produce privacy keys, a 
phase modulation with a value later determined allows 
correcting a fluctuation of the difference in optical path and 
measuring the quantum mechanical state concurrently with 

^ 15 producing quantum ciphers.. 

= 

□ Also, a quantum cipher communication system according 

f7 to the present invention is characterized in that phase 

W modulations that monotonically increase and phase modulations 

H* that are randomly applied may be repeated. The system so 

20 constructed correcting a fluctuation of the difference in optical 
path and measuring the quantum mechanical state 
simultaneously. 

Also, a quantum cipher communication system according 
to the present invention is characterized in that a wiretap is 
25 detected on the basis of an increase in the error rate of the said 
difference signal. The system so constructed notes that the error 
rate in a privacy key increases as the probability that an 
improper phase modulation by wiretapping is performed 
increases and thus permits detecting the presence of 
30 wiretapping. 

Further, a quantum cipher communication system 
according to the present invention is characterized in that a 
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wiretap is detected on the basis of a change in a Wigner 
distribution function that indicates a quantum mechanical state 
of the said difference signal. The system so constructed notes 
that if a transmission signal as separated in part is wiretapped. 
5 its amplifying process is necessarily accompanied by a quantum 
fluctuation which causes a change in the Wigner distribution 
function. Hence, from a change in the Wigner distribution 
function, wiretapping can be detected. 

Also, a quantum cipher communication system according 
10 to the present invention is characterized in that the said two 
output lights are converted into corresponding electric signals 
through photoconductor diodes. The system so constructed allows 
performing measurement at a high quantum efficiency and at a 
good S/N ratio. 

15 Further, a quantum cipher communication system 

P; according to the present invention is characterized in that for the 

said photoconductor diodes, use is made of silicon photoconductor 
diodes when the light has a wave length of 600 nm to 900 nm, and 
of InGaAs photoconductor diodes when the light has a wave 
20 length of 1000 nm to 1500 nm. The system so constructed allows 
performing measurement at a high quantum efficiency and at a 
good S/N ratio. 

Brief Description of the Drawing s 
25 The present invention will better be understood from the 

following detailed description and the drawings attached hereto 
showing certain illustrative forms of embodiment of the present 
invention. In this connection, it should be noted that such forms 
of embodiment illustrated in the accompanying drawings hereof 
30 are intended in no way to limit the present invention but to 
facilitate an explanation and understanding thereof. 

Fig. 1 is a schematic diagram that illustrates a first form 
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of embodiment of a quantum cipher communication system 
according to the present invention; 

Figs. 2A and 2B are graphical representations that 
explain a signal that is observed in a recipient side for a signal 
5 light with a fluctuation in its quantum mechanical state not 
taken into account in a quantum cipher communication system 
according to the present invention in which Fig. 2 A is a graphical 
representation showing a relationship of the numbers of photons 
incident onto a pair of photoconductor diode with respect to a 

10 relative difference in optical path between a reference signal 
light and a quantum signal light with a diagram inserted 
showing in enlargement the relationship in a range in which the 
difference in optical path is close to zero, and Fig. 2B is a 
graphical representation of a signal difference between the 

15 reference signal light and the quantum signal light; 

Figs. 3A to 3D are graphical representations that explain 
a signal that is observed in a recipient side for a signal light with 
a fluctuation in its quantum mechanical state taken into account, 
the signal being shown for an optical path difference of 0 degree, 

20 90 degrees (A/4), 180 degrees (A/2), and 270 degrees (3A/4), 
respectively, in which in each graph the abscissa represents the 
magnitude of a signal difference and the ordinate represents the 
probability that the signal difference is measured; 

Figs. 4A and 4B are graphical representations that 

25 illustrate typical measurement results that were obtained 
according to the first form of embodiment of the present 
invention in which the graph of Fig. 4A shows a frequency 
distribution for the difference signal taken along the ordinate 
with respect to the voltage actually measured 5000 times and 

30 taken along the abscissa and the graph of Fig. 4B illustrates a 
Wigner distribution function derived by computer tomography 
from data that were obtained when such a measurement made to 
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obtain the result shown in Fig. 4A were repeated 30 times; 

Fig. 5 is a tabular diagram that illustrates a quantum 
cipher or encryption procedure according to the present 
invention in which in the left hand side column, numeral 1 is 
5 used to indicate a phase modulation of a sender, numeral 2 a 
phase modulation of a recipient, numeral 3 a sum total of the 
sender's and recipient's phase modulations, numeral 4 a result of 
measurement by the recipient, numeral , numeral 5 indicating 
that the sender notified by the recipient on a public 

0 10 communication line of the recipient's added phase modulation 
SI notifies the recipient on a public communication line of mark O 
If: or OK when the sum total of the sender's and recipient's phase 
CI modulations becomes equal to 0 or 180 degrees, and x or NG 

SSS - 

1 1.1 

'S\ (no good) when it becomes equal to 90 or 270 degrees, numeral 6 

JL 15 indicating that the recipient makes a privacy (or secret) key 

W when O is obtained by assigning bit 1 to plus (+) and bit 0 to 

minus (-), and numeral 7 indicating that the sender makes a 
^ privacy key by assigning bit 1 when the sum total is 0 or 90 

degrees and bit 0 when the sum total is 180 or 270 degrees; 
20 Fig. 6 is a schematic diagram that illustrates a second 

form of embodiment of the quantum cipher communication 
system according to the present invention; and 

Fig. 7 is a tabular diagram that illustrates a quantum 
cipher or encryption procedure for the system in the second form 
25 of embodiment shown in Fig. 6. 

Best Modes for Carrying Out the Invention 

Hereinafter, the present invention will be described in 
detail with reference to suitable forms of embodiment thereof 
30 illustrated in the drawing figures. While the present invention 
will hereinafter been set forth with respect to certain illustrative 
forms of embodiments thereof, it will readily be appreciated to be 
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obvious to a person skilled in the art that many alternations 
thereof, omissions therefrom and additions thereto can be made 
without departing from the essences of scope of the present 
invention. Accordingly, it should be understood that the 
5 invention is not intended to be limited to the specific forms of 
embodiment thereof set forth below, but to include all possible 
forms of embodiment thereof that can be made within the scope 
with respect to the features specifically set forth in the appended 
claims and encompasses all the equivalents thereof. 
O 10 A detailed description will first be given in respect of a 

s~$ typical, first form of embodiment of a quantum cipher 

^ communication system of the present invention. 

Cl Fig. 1 is a schematic diagram that illustrates a quantum 

[f\ cipher communication system implemented in a first form of 

;L 15 embodiment according to the present invention. 

* i 

UJ Referring to Fig. 1, the quantum cipher communication 

system in this form of embodiment of the invention comprises an 
P apparatus in a sender's side 10, a pair of paths of transmission 

14 and 16 and an apparatus in a recipient's side 12. The sender's 
20 apparatus 10 includes a light source for a laser beam 1, a beam 
splitter 2, a mirror 3 and a light attenuator 4. 

A light from the laser light source 1 is split into a 
reference light L and a quantum signal light S by the beam 
splitter 2. The mirror 3 that reflexes the signal light S is adapted 
25 to be movable by a distance which is as small as the wave length 
of the signal light S to make a phase change of the signal light S 
and hence a relative phase difference between the reference and 
signal lights L and S. 

The light attenuator 4 is used to attenuate the quantum 
30 signal light S to an extent that it has a typical intensity which is 
so weak as it corresponds to a single photon or so and such that a 
change in its quantum mechanical state is detectable 
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The reference light L is endowed with a typical intensity 
which is so intense as it corresponds to photons as large as 10 
millions in number. Thus, the reference light L is adjusted to be 
extremely higher than and radically different in intensity from 
5 the signal light S. 

Thus, using the reference light L which is so intensified 
and made much stronger than the signal light which is so weak 
as described permits efficient detection and measuring such a 
quantum signal light S in its quantum state. 
10 The recipient apparatus 12 includes a mirror 5 adapted 

to be movable by a distance which is as small as the wave length 
of the light, a beam splitter 6 which has a transmittance and 

CS reflectance equal to each other, a pair of photoconductor diodes 

n 2 

'JZ 7a and 7b, and an output unit 8 comprising an amplifier and a 

^ 15 voltage measuring device. 

uj The recipient may alter the relative phase difference 

Hj between the reference and signals lights L and S. Then, these 

lights L and S are superimposed on the beam splitter 6. The 
two output lights from the beam splitter 6 then come incident on 
20 the photoconductor diodes 7a and 7b, respectively, for conversion 
into respective electric signals. Then a difference between these 
signals is amplified and an output voltage is measured and taken 
as a signal difference. For the amplifier, use is made of a charge 
sensitive amplifier a typical gain of which is 30 volts/pC (pico 
25 coulombs). Then, if the signal difference contains ten thousands 
( 10, 000) electrons the output voltage will have a magnitude of 
50 mV. 

For the photoconductor diodes 7a and 7b, use is made of 
the Si type for a light having a wave length of 600 to 900 nm and 
30 of the InGaAs type for a light having a wave length of 1000 to 
1500 nm. Then, a quantum efficiency as high as 90 % or more and 
in the optimum case 99 % or more can be obtained. Thus, in the 
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optimum case, for example, ten thousands (10, 000) photons 
making up the intense reference light L can be converted into 
ninety nine hundreds (9900) electrons whose number can be 
measured at a good S/N ratio. 
5 An explanation is next given in respect of signal 

processing by the recipient. In the description that follows it is 
assumed for the sake of simplicity that the photoconductor 
diodes 7a and 7b have a quantum efficiency of 100 % and the 
amplifier has a noise negligible. 

10 Referring to Fig. 1, the signal light S and the reference 

light L split into by the beam splitter 2 and then separately 
transmitted along their own optical paths are superposed at the 
beam splitter 6 where a difference in optical path between these 
lights causes an interference. 

15 However, an extreme difference in intensity between the 

two lights renders the resulting interference pattern or fringe 
rather unclear. 

Figs. 2A and 2B are graphical representations that 
explain a signal that is observed in the recipient side for a signal 

20 light with a fluctuation in its quantum mechanical state not 
taken into account. There, Fig. 2A is a graphical representation 
showing a relationship of the numbers of photons incident onto 
the photoconductor diodes with respect to a relative difference in 
optical path between the reference signal light and a quantum 

25 signal light with a diagram inserted showing in enlargement the 
relationship in a range in which the difference in optical path is 
close to zero, and Fig. 2B is a graphical representation of a signal 
difference between the reference signal light and the quantum 
signal light. 

30 The beam splitter 6 is here so adjusted that in the 

absence of a signal light S it splits the reference signal L into two 
at a ratio of 1/1. Therefore, the number of photons which are 
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incident onto each of the two photoconductor diodes 7a and 7b 
measures one half of the number of photons of the reference light 
L : n 0 , hence n 0 /2.Thus, as shown in Fig. 2 A, with the value n 0 /2 
as its center a small interference pattern or fringe appears 
5 according to a relative difference in optical path between the two 
lights L and S. With the output signals which the two 
photoconductor diodes 7a and 7b provide for the strength or 
weakness of the interference fringe being in opposite phase with 
each other, finding the difference between the two output signals 
Q 10 (difference signal) allows locating the very portion of the 

Cf interference pattern itself as indicated in Fig. 2B. In this case, 

p4 the amplitude of the interference pattern may be expressed by 

□ twice the square root of the product of the number of photons n 1 

III of the signal light S and the number of photons n 0 of the 

^ 15 reference light L, namely by 2V~n 1 V~n 0 . It should be noted in this 

Q connection that the amplitudes of the signal light S and the 

reference light L are each the square root of the number of 

m 

CI photons and are thus V~ni and V~n 0 , respectively. Hence, the 

Lsrb 

maximum value of the difference between the signals incoming 
20 and thus outgoing of the photoconductor diodes 7a and 7b can be 
expressed by: 

[(^fn x + V^n 0 )V 2 - (V^n, - /n 0 ) 2 /2] = 2V"n 1 /"n 0 
It should further be noted that those indicated above 
each represent an average value that can be derived from a large 
25 number of measurements, and that each of the measurements for 
the difference signal, that is the difference in magnitude between 
the signals (indicating the two output lights in opposite phase 
from the beam splitter 6), involves a fluctuation in value due to a 
quantum fluctuation of the signal light represented by a 
30 standard deviation of V~n 0 

Figs. 3A to 3D are graphical representations that explain 
a difference signal that is measured in a recipient side with a 
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fluctuation in the quantum mechanical state of the signal light 
taken into account. There, the signal is shown for an optical path 
difference in terms of phase difference of 0 degree, 90 degrees (A 
/4), 180 degrees (A/2), and 270 degrees (3/1/4), respectively. And 
5 in each graph the abscissa represents the magnitude of a 
difference signal and the ordinate represents the probability that 
the difference signal is measured 

It should be noted as regards the above that character A 
designates the wave length of the light and that the abscissa in 
10 each of the graphs is normalized by dividing the difference signal 
by 2*f n 0 

As shown in Figs. 3A to D, the frequency distribution of 
the difference signal found if the quantum signal light S is in a 
coherent state in which an average number of photons is as small 

15 as 1 is represented by a Gaussian distribution as a function of 
the relative difference in optical path (in terms of phase 
difference) between the quantum signal light S and the reference 
light L. Figs. 3A, 3B, 3C and 3D show that the Gaussian 
distribution has an average value of +1, 0, -1 and 0, when the 

20 optical path difference is 0, 90, 180 and 270 degrees, respectively, 
each with a standard deviation of 0.5. 

Therefore, in order to execute ciphering or encryption, 
the recipient is allowed to use the results of measuring the 
difference signal to determine if the optical path difference is 

25 either 0 degree or 180 degrees. Thus, the recipient is just 
required to discriminate between the patterns of Figs. 3A and 3C. 
To do this, threshold values X- and X+ may be set and finding the 
difference signal to be equal to or greater than X+ and to be equal 
to or less than X- allows the recipient to determine the optical 

30 path difference to be 0 and 180 degrees, respectively. 

In this way, establishing the threshold values X- and X+ 
permits the effective detection efficiency and error rate to be 
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given with freedom. For instance, with the assumption that 
where nl = 1 as above, X- = X+ = 0, the probability that the 
optical path difference when it is 0 degree is judged to be 0 
degree is as high as 97.7 % which is given by integrating the 
5 Gaussian distribution from [(average value) - (twice the standard 
deviation)] to infinity. On the other hand, the probability(error 
rate) that the optical path difference when it is actually 180 
degrees is misjudged to be 0 degree is as low as 2.28 % which is 
given by integrating the Gaussian distribution from [(average 

10 value) + (twice the standard deviation) to infinity. Also, if X* = 
-0.5 and X+ = 0.5 are assumed, computation likewise gives a 
detection probability reduced to 84.1 %, but yields an error rate 
reduced to as low as 0.13 %, thus giving rise to the performance 
much higher than that which has so far been achievable. 

15 Figs. 4A and 4B are graphical representations that 

illustrate typical measurement results that were obtained 
according to the first form of embodiment of the present 
invention. The graph of Fig. 4A shows a frequency distribution 
for the difference signal taken along the ordinate with respect to 

20 the voltage actually measured 5000 times and taken along the 
abscissa and the graph of Fig. 4B illustrates a Wigner 
distribution function derived by computer tomography from data 
that were obtained when such a measurement made to obtain the 
result shown in Fig. 4A were repeated 30 times. 

25 The Wigner distribution function is one of the methods of 

representing a signal light in its quantum state, and the fact 
here that the Wigner distribution function was derived indicates 
that the signal light in its quantum state is actually observable. 

In the observation in this form of embodiment of the 

30 invention, voltage values of the difference signal for 5000 (five 
thousands) output light pulses were measured to obtain a 
frequency distribution. Fig. 4A shows that the frequency 
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distribution follows a Gaussian distribution. It should be noted 
that the abscissa of Fig. 4A has plotted along measured voltages 
which to allow direct comparison with the graph of Fig. 3 need to 
be corrected for the gain of amplifier and the intensity of the 
5 reference light. 

On making such correction, it is confirmed that the width 
of the distribution observed (the magnitude of the fluctuation of 
the difference signal) agrees with the width that was predicted 
p« as the quantum fluctuation. 

tfJ 10 In deriving the Wigner distribution function shown in 

m Fig. 4B, data were gathered from measurements that were 

^ repeated 30 times the measurements which measured the 

fU difference signal 5000 times while varying the optical path 

7 difference, hence the data from measurements of 150,000 output 

15 light pulses. 

^ It is therefore seen that the present invention so far 

Zi : described in its first form of embodiment makes it possible to 

measure and observe a signal light in its quantum state by 
measuring it while varying its optical path difference, i. e., the 
20 difference in optical path between a reference light and the 
quantum signal light. And, since the Wigner distribution 
function of a given quantum signal light contains all the 
information knowledgeable or that can be known theoretically of 
the signal light, it is here rendered possible to detect the 
25 presence of a wiretapper with greater simplicity , thus from 
information on a change in the signal light. 

An explanation is next given in respect of a process of 
quantum cipher operation or encryption according to the present 
invention. 

30 Fig. 5 is a tabular diagram that illustrates a process of 

quantum cipher operation or encryption according to the present 
invention. There, in the left hand side column, numeral 1 is 
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used to show that the row which follows right represents a phase 
modulation (change) made by a sender, numeral 2 (row 2) a phase 
modulation made by a recipient, numeral 3 (row 3) a sum total of 
the sender's and recipient's phase change or modulations, 
5 numeral 4 (row 4) a result of measurement by the recipient, 
numeral 5 (row 5) indicates that the sender is notified by the 
recipient on a public communication line of the recipient's added 
phase change and tells or have told the recipient about the sum 
total of the phase changes to make 0 or 180 degrees O or OK 

10 and to make 90 or 270 degrees X or NG (no good), numeral 6 
(row 6) indicates that the recipient makes its privacy (or secret) 
key by assigning bit 1 to plus (+) and bit 0 to minus (-) when O 
(OK) is the case, and finally numeral 7 (row 7) indicates that the 
sender assigns bit 1 when its own phase modulation is 0 or 90 

15 degrees and bit 0 when it is 180 or 270 degrees, thereby making 
its privacy key. It should be noted that here for the sake of 
simplicity the error rate is regarded as 0. 

First, the sender by controlling the position of the mirror 
3 shown in Fig. 1, randomly imparts to a quantum signal light S, 

20 phase changes 0, 90, 180 and 270 degrees (see the row 1 in the 
table of Fig. 5). On the other hand, the recipient by controlling 
the position of the mirror 5 imparts to a reference signal L, 
random phase changes 0 and 90 degrees (as shown in the row 2 of 
the table in Fig. 5). Then, the sum total of the difference in 

25 optical path between the reference and quantum signal lights L 
and S or the optical path difference of the system will be the 
difference between the phase changes or modulations which the 
sender and the recipient made, respectively (see the row 3 of the 
table in Fig. 5). 

30 Further, the recipient applies to its measurement results 

a setting for the threshold values X- and X+ as described above, 
and gives the sign if the difference signal mentioned above is 
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found to be equal to or less than X- and gives the sign if the 
difference signal is found to be equal or greater than X+ (as 
shown in the row 4 of the table in Fig. 5). Then, it can be seen 
that the sign + and the sign - are bound to appear in columns for 
5 the row 4 when the columns have for the row 3 the values 0 and 
180 degrees, respectively, and that the sign + and the sign - 
appear at an equal probability in columns for the row 4 when the 
columns for the row 3 have the values of 90 and 270, respectively 
(see the rows 3 and 4 in the table of Fig. 5). 
10 Then, the recipient in relation to the bit 0 or the bit 1 

notifies the sender on the public communication line of which of 0 
and 90 degrees of phase change imparted to the reference light in 
its phase modulation (see the column 5 in the table of Fig. 5). 

The sender then notifies the recipient that the case is 
15 being adopted as a privacy key in which the total optical phase 
difference is either 0 or 180 degrees. That is, the sender notifies 
the recipient of the sign O or OK when the sum total of the 
phase changes or modulations is either 0 or 180 degrees and of 
the sign X or NG when it is either 90 or 2 70 degrees (see the 
20 row 5 in the table of Fig. 5). 

The recipient applies the bit 1 to the sign + and the bit 0 
to the sign - when O (OK) is the case and makes the same its 
privacy key (see the row 6 in the table of Fig. 5). 

And, the senders gives bit 1 to its added phase changes of 
25 0 and 90 degrees and bit 0 to those of 180 and 270 degrees and 
makes the same its privacy key (see the raw 7 in the table of Fig. 
5). 

As shown in Fig. 5, it will thus be seen that the privacy 
keys so produced as described above agree invariably with each 
30 other. 

An explanation is next given in respect of a method of 
sensing a wiretap or eavesdropping 
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On a quantum mechanical level, the principle applies 
that any measurement affects the object measured. And, since 
any performed attempt to wiretap or eavesdrop by a third party 
causes a change in its observing quantum signal, it is impossible 
5 for a third party to learn a privacy (secret) key contained in the 
signal being transmitted without being noticed by the sender and 
recipient. 

The specific form of a change caused to the quantum 
signal varies depending on a particular step which the 
10 wiretapper attempts to take. For example, assume that the 
Sj wiretapper is taking the step to obstruct or intercept a quantum 

i§ signal light to read information it contain and then to resend the 

^: signal. Then, if the wiretapper attempts to make the same 

CI measurement as will be done by the recipient as mentioned above 

ii 15 in order to read the signal information, its imparting a wrong 

f** signal modulation or change to the reference light signal (such as 

Ui such that its added sum total to the sender's imparted signal 

at 

r* modulation becomes 90 or 270 degrees) results in failure to 

resend the recipient the correct signal. 

20 Also, because it is universally impossible from the 

principle of uncertainty relation to obtain information from both 
of the two amplitude components which are 90 degrees apart 
from each other, whatever step it is taking to read the 
information the wiretapper will be unable to acquire correct 

25 information, and from any such attempt there will appear of 
necessity an increase in the error rate. That is, there will only be 
a disagreement in privacy key between the sender and the 
recipient. For example, if the wiretapper is taking the step to 
once interrupt the signal light and then to resend the signal, a 

30 disagreement in privacy key does occur at a probability of 1/4 
which is the product of probability 1 1/2 to make an improper 
phase modulation and probability : 1/2 to resend any signal as a 
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wrong signal. 

Accordingly, from inconsistency found between their 
privacy keys on checking them in part the parties will be able to 
detect a third party's attempt to wiretap. 
5 Also, it can be assumed that the wiretapper is taking the 

step to isolate and measure a portion of a signal light to acquire a 
portion of information en route and to offset a resultant loss of 
the signal light by amplification. This is a case in which any 
C s conventional quantum cipher is hard to detect wiretapping. In 

J{ 10 accordance with the present invention, however, such a 

OS wiretapping does appear as a change in the Wigner distribution 

f*l function which enables the recipient to readily notice it. This is 

s *f because a process of amplification is accompanied of necessity by 

« an increase and decrease in the quantum fluctuation. It does 

J^i 15 appear as a increase and decrease in the dispersion or variance 

in measurement results as shown in Fig. 4A. As a result, the 
p Wigner distribution function may in its graphical distribution 

^ become thicker or unsymmetrical about its peak value. Also, if 

the wiretapper makes the amplification only after it has access to 
20 definite information, the values XI and X2 that make the peak 
value must vary. 

An explanation is next given in respect of a second form 
embodiment of the present invention. 

The second form of embodiment supposes using a single 
25 optical fiber for paths of signal transmission, and represents a 
practical form of implementation that is designed to permit a 
process of quantum cipher operation or encryption across a long 
distance for which the first form of embodiment if it remains as 
described above is hard to be practiced. To this end, the reference 
30 and quantum signal lights are split into both on the basic of time 
and as polarized, and are transmitted along the common optical 
path. The recipient signal processing operation and the process 
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of quantum cipher operation are basically the same as those 
described above in connection with the first form of embodiment. 

Besides the procedures by the sender and recipient of 
phase modulation and quantum ciphering, there are added 
5 operations to enhance the stability of an optical path difference 
and to monitor the quantum state by additionally giving 
preselected phase modulations. 

To enhance the stability of a difference in optical path, a 
r , difference signal predicted if a preselected phase modulation is 

>0 10 given is compared with an actual difference signal measured. 

g| The quantum state can be monitored by giving a uniformly 

J: changing phase modulation as a preselected phase modulation. 

Fli Fig. 6 diagrammatically illustrates a quantum cipher 

system according to the second form of embodiment of the 
15 invention. 

M Referring to Fig. 6, the system according to the second 

^ form of embodiment includes in the sender's side a laser light 

H source 21 that produces a linearly polarized pulsed light; a beam 

splitter 22 that splits the pulsed light into two signal lights, i. e., 
20 a reference signal light L and a quantum signal light S; a half- 
wave plate 24 that rotates the polarization of the signal light S 
by 90 degrees; a light attenuator 25 in which an absorbing 
medium weakens the intensity of the signal light S; a phase 
modulator 26 for changing the phase of the signal light S; and a 
25 polarized beam splitter 23 that returns the reference and 
quantum signal light L and S onto a common optical path or axis 
and then to make both the reference and quantum signal lights L 
and S incident into an optical fiber 27. Then, the quantum and 
reference signal lights S and L are polarized to lie orthogonal to 
30 each other and mutually spaced apart in time. In Fig. 6, 
reference characters 18 and 19 designate mirrors. 

With the system constructed as described above, the 
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quantum and reference signal lights S and L are allowed to 
travel in different paths only in the sender and recipient sides 
and each of a short distance and for the most part along a 
common path of transmission. Thus, a variation of the relative 
5 difference in optical path between the two signal lights can be 
made small. 

Further, a phase modulation in which the value is later 
determined to eliminate any possible effect of a variation of the 
p difference in optical path and a phase modulation for 

^{ 10 transmitting a privacy key are given. 

ul The table in Fig. 7 shows a process of giving phase 

m modulation in the system representing the second form of the 

*l* present invention. 

E With reference to Fig. 7 for further explanation, numeral 

JTJ 15 1 in the left column is used to indicate that the row (row l) that 

H; follows right.represents a phase change or modulation the sender 

p gives. The numerals underlined in the row 1 indicate phase 

p= changes for transmission of a privacy key. Numeral 2 (row 2) 

represents a phase modulation the recipient gives, Numeral 3 
20 (row 3) represents a total sum of the sender's and recipient's 
given phase modulations, numeral 4 (row 4) represents a 
recipient's measurement result, numeral 5 (row 5) indicates that 
the sender is notified by the recipient on a public communication 
line of the recipient's added phase change and tells or have told 
25 the recipient about the sum total of the phase changes to make 
cases with 0 or 180 degrees O or OK and the sum total of the 
phase changes of not O or not 180 degrees, numeral 6 (row 6) 
indicates that the recipient makes its privacy (or secret) key by 
assigning bit 1 to plus (+) and bit 0 to minus (-) when O (OK) is 
30 the case, and finally numeral 7 (row 7) indicates that the sender 
assigns bit 1 when its own phase modulation is 0 or 90 degrees 
and bit 0 when it is 180 or 270 degrees, thereby making its 
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privacy key. 

In the case of a later determined phase modulation 
(found in the row 5 of the table in Fig. 7), the ability to predict an 
average value of difference signals permits making an estimate 
5 for a variation in the difference in optical path conversely from 
such an average value of actual difference signals measured. 

Thus, even with a variation or fluctuation present in the 
optical path difference by reason of an external cause, it is still 
m made possible to effect a correction such as to cancel its adverse 

%£i 10 effect. 

m It is possible to obtain the quantum state of a signal light 

by means of computer tomography from data for the difference 
fy signal in a varied phases. 

It is thus seen that the present invention enables 
J** 15 measuring or observing the quantum state of a signal light while 

m making correction for a variation in its optical path difference 

~; z simultaneously. 

Industrial Ap pli cab ili t y 

20 • As will be apparent from the foregoing description, a 

quantum cipher communication system according to the present 
invention allows measuring or observing the quantum 
mechanical state of a transmission signal while permitting it to 
be detected at a substantially high quantum efficiency. 

25 It is therefore seen that a quantum cipher 

communication system of the present invention is a highly useful 
cipher communication system that makes any attempt by a third 
party to wiretap or eavesdrop unsuccessful. 



-25- 



